How to Turn Off VBS (Virtualization-Based Security) in Windows 11

What Is VBS and What Does It Protect You From?

Disable VBS Windows 11 if you’re chasing performance — but before you do, it helps to understand what it actually does. VBS stands for Virtualization-Based Security, and it uses hardware-powered virtualization to isolate sensitive parts of your operating system. Think of it like a security vault inside your memory that malware and low-level threats can’t easily touch.

At the heart of this system is a feature called Memory Integrity, also known as HVCI. It ensures that drivers and core Windows processes aren’t tampered with before they even start. It’s part of the broader virtualization based security approach that helps block kernel attacks, rootkits, and credential theft attempts before antivirus software even gets involved.

Chances are, if you’ve done a clean install of Windows 11 recently, VBS is already turned on — sometimes without any prompt. This setting lives deep inside your Windows 11 VBS stack, and it’s built into Microsoft’s default security model for modern systems.

But here’s the thing — while VBS adds solid protection, it also pulls from system resources. For high-performance use cases like gaming or heavy media production, that tradeoff may not be worth it. That’s where the option to disable VBS Windows 11 becomes worth considering. We’ll cover who should — and shouldn’t — turn it off next.

So, should you disable VBS Windows 11 enables by default? The answer depends entirely on how you use your computer. For some users, turning it off brings real performance gains. For others, especially those in risk-heavy environments, keeping VBS on is the smart move. Let’s break it down so you know exactly where you stand.

If you’re a gamer chasing every last frame per second, or a video editor pushing your CPU and GPU hard with render-heavy workloads, disabling VBS can actually help. Many benchmarks show a measurable bump in FPS and system responsiveness when VBS is turned off. The same applies to power users who manage their own system security and want zero overhead from features they don’t actively need.

But that’s not everyone. If you use public Wi-Fi often, manage sensitive information, or work in a shared environment (like a school, office, or dev/test system), you probably want to leave VBS enabled. Why? Because disable virtualization based security on a machine exposed to unknown networks or users opens the door to memory attacks and credential theft — the very threats VBS was built to stop.

It’s also worth noting that enterprise systems often rely on VBS for BitLocker integration, Credential Guard, and Smart App Control. Disabling it might violate group policy rules or break compatibility with compliance tools. In other words, if you’re not 100% sure what you’re doing, it’s safer to leave it on. But if you’re confident in your setup and want to squeeze out extra performance, disable VBS Windows 11 — just do it with your eyes open.

Table of Contents

• What Is VBS and What Does It Protect You From?
• Disable VBS via Windows Security Settings (GUI Method)
• What Might Stop Working If You Disable VBS?
• Frequently Asked Questions (FAQ)
  • What is VBS in Windows 11?
  • Should I disable VBS in Windows 11?
  • How do I disable VBS in Windows 11?
  • Is it safe to disable virtualization-based security?
  • Can I re-enable VBS later if needed?

Disable VBS via Windows Security Settings (GUI Method)

If you’re looking for the easiest way to disable VBS Windows 11 enables by default, the Windows Security interface is the place to start. This method doesn’t require any command-line work or registry tweaks — it’s quick, visual, and beginner-friendly.

Here’s how to do it: Open Settings, then navigate to Privacy & Security > Windows Security. From there, click on Device Security and then look for a section called Core Isolation. Inside that menu, you’ll see the toggle for Memory Integrity — this is a key part of VBS. If it’s switched on, just flip it off. That’s the first step to disabling VBS safely.

After you turn it off, you might be prompted to restart your PC. Do that to apply the change. You can double-check later to see if VBS is still running by searching for System Information in the Start menu. Scroll down to find a line that says “Virtualization-based Security” — it should now say “Not Enabled.”

This method is perfect for most people who want to disable virtualization-based security without diving into risky territory. It’s also fully reversible, so if you need to re-enable VBS later, just go back and turn Memory Integrity back on. Simple, clean, and no command lines required.

If you want to fully disable VBS Windows 11 might still run in the background — even after toggling off Memory Integrity — there’s a more advanced method. This route involves checking VBS status using System Information, then modifying Group Policy, Registry, or even boot settings for complete control. It’s not complicated, but it does require a little more caution.

First, confirm whether VBS is still active. Press Windows + R, type msinfo32, and hit Enter. Look for the entry labeled “Virtualization-based Security.” If it says “Running,” then VBS is still on. That’s where the next step comes in.

To disable VBS via Group Policy (only on Pro editions), press Windows + R, type gpedit.msc, and go to Computer Configuration > Administrative Templates > System > Device Guard. Open the “Turn on Virtualization Based Security” setting and set it to Disabled. Apply and exit.

If you’re using Windows Home or prefer the Registry, navigate to:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\DeviceGuard

Here, create a DWORD (32-bit) Value named EnableVirtualizationBasedSecurity and set its value to 0. Restart your PC afterward.

Still seeing VBS running? As a final step, you can open Command Prompt as admin and run:

bcdedit /set hypervisorlaunchtype off

This disables the hypervisor that VBS depends on. Just be aware that this step can affect other virtualization tools like Hyper-V or WSL2. If you rely on those, proceed with caution.

Once done, reboot your system and check msinfo32 again. It should now show “Not Enabled” for VBS. This method gives you full control over virtualization based security disable actions — ideal for advanced users who want zero background impact from security virtualization.

What Might Stop Working If You Disable VBS?

Before you hit restart, it’s worth understanding what you could be giving up. Disabling VBS Windows 11 uses for deep-level security isn’t without its tradeoffs — especially if you rely on certain built-in protections. While it can speed things up, it may also limit or disable features you didn’t realize depended on VBS behind the scenes.

One major feature that relies on VBS is driver integrity enforcement. If you turn off virtualization based security, your system may stop blocking unsigned or tampered drivers. That might sound like freedom, but it also means risk — especially if you install apps or peripherals from unknown sources.

Windows Hello’s enhanced sign-in protections and Smart App Control also tap into VBS. With VBS disabled, some facial recognition or app scanning features may no longer function as securely. And if you’re using BitLocker or Credential Guard in a managed environment, expect warnings or policy blocks if VBS is no longer active.

That’s why disabling VBS isn’t a casual tweak. It can be the right choice for gamers or creators looking for maximum performance, but if you rely on enterprise-grade protections or connect to sketchy networks, keeping VBS on is probably the safer move. Know your setup — and your risks — before pulling the plug.

Want a broader list of optimization tweaks beyond just disabling virtualization? Visit our complete Windows 11 speed up guide for detailed performance strategies and cleanup tips that go far beyond security settings alone.

Need to turn VBS back on? Good news — reversing the change is easy, and Windows doesn’t make you jump through hoops. Whether you used the toggle in Windows Security or went through Group Policy or Registry edits, re-enabling virtualization-based security only takes a few clicks or commands.

To get started, open Settings and head to Privacy & Security > Windows Security > Device Security. Click on Core Isolation, then switch Memory Integrity back on. Restart your PC afterward. This alone reactivates key parts of VBS Windows 11 relies on for device protection.

If you previously used Group Policy or Registry tweaks to disable virtualization based security, just reverse those changes. In the Local Group Policy Editor, set the “Turn on Virtualization Based Security” policy back to “Not Configured” or “Enabled.” If you edited the registry, change the EnableVirtualizationBasedSecurity value back to 1 or delete the key entirely.

And don’t forget to undo the BCDEDIT command if you used it. Open Command Prompt as admin and run:

bcdedit /set hypervisorlaunchtype auto

Once all changes are applied and your PC reboots, open msinfo32 again and check for “Virtualization-based Security: Running.” If you see that, you’re good to go. Just remember — unless performance is a critical concern, keeping VBS on is usually the safer bet for everyday users.

Frequently Asked Questions (FAQ)

What is VBS in Windows 11?

VBS stands for Virtualization-Based Security. It uses hardware-assisted virtualization to isolate sensitive parts of your system’s memory. This helps protect against advanced threats like credential theft, rootkits, and low-level malware attacks. It’s often enabled by default on newer Windows 11 systems.

Should I disable VBS in Windows 11?

It depends. If you’re a gamer or content creator looking to squeeze out every bit of performance, disabling VBS Windows 11 includes might help. But if you rely on advanced security features, connect to public networks, or use a work-managed PC, it’s better to keep it on for protection.

How do I disable VBS in Windows 11?

You can disable VBS by turning off Memory Integrity in Windows Security settings. For full control, use Group Policy, Registry Editor, or the BCDEDIT command. Always restart your PC after making changes to ensure VBS is fully turned off.

Is it safe to disable virtualization-based security?

Disabling virtualization-based security reduces system-level protections, so it carries some risk. If you’re in a secure environment and know what you’re doing, it’s generally safe. But if you’re unsure or rely on features like BitLocker or Credential Guard, leave it enabled.

Can I re-enable VBS later if needed?

Yes. You can re-enable VBS by turning Memory Integrity back on in Device Security settings, or by reversing any registry, policy, or boot configuration changes you made. After a reboot, VBS should be fully active again.